cdb

Pown CDB Pown CDB est un utilitaire du protocole de débogage Chrome. L'objectif principal de l'outil est d'automatiser les tâches courantes pour aider à déboguer les applications web depuis la ligne de commande et de surveiller et intercepter activement les requêtes et réponses HTTP. Ceci est...

xepor

Xepor Xepor prononcé /ˈzɛfə/ , zephyr est un framework de routage web pour les ingénieurs en rétro-ingénierie et les chercheurs en sécurité. Il fournit une API de type Flask permettant aux hackeurs d'intercepter et de modifier les requêtes HTTP et/ou les réponses HTTP dans un style de codage...

mitm-router

☠ Routeur Homme-du-milieu 🌐 Transformez n'importe quel ordinateur Linux en un réseau Wi-Fi public qui intercepte silencieusement MITM tout le trafic HTTP. Fonctionne dans un conteneur Docker en utilisant hostapd, dnsmasq et mitmproxy pour créer un réseau sans fil honeypot ouvert nommé "Public"...

ritm

Ruby In The Middle proxy d'interception HTTP/HTTPS Ruby in the middle RITM est un proxy d'interception HTTP/HTTPS avec génération et signature de certificats à la volée, qui laisse à l'utilisateur toute la puissance du langage Ruby pour intercepter et même modifier les requêtes et réponses comme...

Hermes-Proxy

Hermes Proxy Hermes Proxy est une application de bureau d'interception HTTP/HTTPS construite avec Electron et Vite. Elle capture les requêtes/réponses, permet de rejouer les requêtes et d'exporter/importer des fichiers HAR. Fonctionnalités Tableau du trafic en direct avec les détails des...

ferret

Ferret Совместный MITM-прокси для специалистов по безопасности. Перехватывайте HTTP-трафик, аннотируйте запросы с помощью AI, запускайте сессии охоты, воспроизводите трафик и отслеживайте находки в одном интерфейсе...

CVE-2026-46398

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version 26.0.0, the haxcmsrefreshtoken cookie is set without the Secure flag. This allows it to be transmitted over unencrypted HTTP, making it vulnerable to theft via packet sniffing on t...

CVE-2026-10584 HTTPS Fallback to HTTP in Graph Explorer

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags

Summary The refresh-token cookie was set with httpOnly: true but missing both the secure flag and the sameSite attribute. Over plain HTTP the cookie could be intercepted on the network; without sameSite, browsers attached it to cross-site POSTs, enabling CSRF against the token-refresh endpoint...

CVE-2026-33472 Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass)

Cryptomator is an open-source client-side encryption application for cloud storage. Version 1.19.1 contains a logic flaw in CheckHostTrustController.getAuthority that allows an attacker to bypass the security fix for CVE-2026-32303. The method hardcodes the URI scheme based on port number, causin...

EUVD-2013-3916

Malware in sbrugna...

U.S. Dept Of Defense: Sensitive Data Exposure at https://█████████

Sensitive data exposure was discovered in an endpoint of a website, which contained AWS S3 credentials, PATH, IP, and PORTs. This could have allowed an attacker to gain access to sensitive information on the AWS account or perform arbitrary modifications on the AWS resources...

MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others

A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments. An improved version of the fantastic mitmrelay...

DEBIAN-CVE-2019-25031

Unbound before 1.9.5 allows configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. createunboundadservers.sh is a contributed script from the...

Design/Logic Flaw

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 contains the administrator account password in plaintext. The page can be intercepted on HTTP...

CVE-2021-28937

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 contains the administrator account password in plaintext. The page can be intercepted on HTTP...

CVE-2021-28937

Acexy Wireless-N WiFi Repeater REV 1.0 is vulnerable to a password disclosure through its web management interface. The NUCLEI template for CVE-2021-28937 notes that the /password.html page stores the administrator password in plaintext and can be intercepted over HTTP, enabling potential access ...

Amazon Acexy Wireless-N WiFi Repeater REV 安全漏洞

Amazon Acexy Wireless-N WiFi Repeater REV is an Amazon.com, Inc. It is used to provide network services A security vulnerability exists in Acexy Wireless-N WiFi Repeater REV 1.0, which originates from a plaintext password containing the administrator account. It is possible to intercept the page ...

Mozilla Firefox Security Advisories (MFSA2020-54, MFSA2020-56) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

CVE-2020-27650

Synology DiskStation Manager DSM before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session...